Privacy Policy
Last updated: June 2026
1. Introduction
DRIVKIND. ("we", "our", "us") is operated by DRIVKIND Technologies (Pty) Ltd, registered in South Africa (Reg. 2026/465449/07), Johannesburg. This Privacy Policy explains how we collect, use, and protect your personal information when you use the DRIVKIND. platform.
Our Information Officer is registered with the Information Regulator of South Africa as required by POPIA. For all privacy enquiries, contact us at robin@drivkind.co.za.
2. Information We Collect
- Account information: email address, username, profile photo
- Vehicle information: cars in your garage, build details, modifications
- Marketplace data: listings you create, parts you sell, offers you make
- Communications: messages sent between users via in-app chat
- Location: approximate location used for listing discovery and map features (only when you grant permission)
- Usage data: screens visited, features used, crash reports
- Device information: device type, operating system, app version
- Phone number: used for SMS verification (OTP) via Twilio — not stored beyond verification
3. Lawful Basis for Processing
- Contract: to provide the services you signed up for
- Legitimate interest: to detect fraud, scams, and abuse on the platform
- Legal obligation: to comply with South African law
- Public interest: scammer reports may include third-party personal information published in the public interest and for the prevention of financial harm. Accused parties may request review via our dispute system.
- Consent: for analytics and usage tracking
4. How We Use Your Information
- To operate and improve the DRIVKIND. platform
- To connect buyers and sellers on the marketplace
- To enable community features (forums, clubs, events, builds)
- To send notifications about activity relevant to you
- To verify your identity via SMS OTP
- To detect and prevent fraud, scams, and abuse
- To analyse platform usage and improve user experience
- To comply with applicable South African law
5. Third-Party Data Processors
We do not sell your personal information. We share data only with the following processors, all bound by Data Processing Agreements:
| Processor | Purpose | Data location |
|---|---|---|
| Supabase | Database, authentication, file storage | EU (West) |
| Sentry | Crash and error reporting | EU |
| PostHog | Product analytics and usage tracking | EU |
| Twilio | SMS OTP verification | EU |
| Cloudflare Turnstile | Bot and abuse protection on authentication endpoints. See Cloudflare's Privacy Policy and the Turnstile Privacy Addendum. | Global CDN |
| Apple | App Store distribution | Global |
| Law enforcement | When required by South African law | South Africa |
6. POPIA Compliance & Your Rights
We process your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information (available directly in the app)
- Object to the processing of your information
- Lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za
To exercise any of these rights, contact us at robin@drivkind.co.za.
7. Data Retention
- Active accounts: retained while your account is active
- Deleted accounts: personal information deleted within 30 days
- Chat messages: purged 12 months after last activity
- Dismissed scammer reports: purged after 6 months
- Listing images: purged 30 days after a listing is deleted
- Some data may be retained longer where required by South African law
8. Security
- Encrypted connections (HTTPS/TLS) enforced on all endpoints
- Row-level security on all database tables
- Bot and abuse protection via Cloudflare Turnstile on all authentication endpoints
- Rate limiting on login, signup, and OTP endpoints
- Encrypted session storage using iOS Keychain and Android Keystore
- Multi-factor authentication on all administrative accounts
9. Data Breach Notification
In the event of a security breach that compromises your personal information, we will notify the Information Regulator of South Africa and affected users as soon as reasonably possible, as required by POPIA Section 22.
10. Children
DRIVKIND. is not intended for users under the age of 13. We do not knowingly collect information from children. Contact us at robin@drivkind.co.za if you believe a child has provided personal information.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via the app. Continued use of DRIVKIND. after changes constitutes acceptance.
12. Access to Information (PAIA)
Our Section 51 Manual is available on request as required by the Promotion of Access to Information Act. Contact us at robin@drivkind.co.za to request a copy.
13. Contact
DRIVKIND Technologies (Pty) Ltd
Reg. 2026/465449/07 · Johannesburg, South Africa
robin@drivkind.co.za · drivkind.co.za